<html>
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
  </head>
  <body text="#000000" bgcolor="#FFFFFF">
    <div class="moz-cite-prefix">
      <div class="moz-cite-prefix">Hi,<br>
      </div>
      <div class="moz-cite-prefix"><br>
      </div>
      <div class="moz-cite-prefix">It seems like this doesn't cause any
        problems in the real world, only in a test like the one on
        internet.nl. But as far as I can tell, it's not okay with
        RFC8020. And I tested some other nameservers (Google cloud DNS,
        Dyn.com and Yadifa happened to be easy to test for me) and I can
        confirm that they all do return "NOERROR" instead of "NXDOMAIN"
        if a sub-host exists.</div>
      <div class="moz-cite-prefix"><br>
      </div>
      <div class="moz-cite-prefix">The situation still seems to be the
        same in the upcoming PowerDNS 4.2 with MySQL backend (I didn't
        test other backends)</div>
      <div class="moz-cite-prefix"><br>
      </div>
      <div class="moz-cite-prefix">The only solution to this "problem"
        (or to get through the test...) I have found was to create any
        other record type on _domainkey (obviously not CNAME or NS, but
        any other record type should be okay).</div>
      <div class="moz-cite-prefix"><br>
      </div>
      <div class="moz-cite-prefix">Sincerely,</div>
      <div class="moz-cite-prefix">Bart Mortelmans</div>
    </div>
    <div class="moz-cite-prefix"><br>
    </div>
    <div class="moz-cite-prefix"><br>
    </div>
    <div class="moz-cite-prefix"><br>
    </div>
    <div class="moz-cite-prefix">Op 15/04/19 om 12:37 schreef Steffan
      Noord:<br>
    </div>
    <blockquote type="cite"
      cite="mid:01f601d4f377$3eaa4130$bbfec390$@gmail.com">
      <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
      <meta name="Generator" content="Microsoft Word 15 (filtered
        medium)">
      <style><!--
/* Font Definitions */
@font-face
        {font-family:"Cambria Math";
        panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
        {font-family:Calibri;
        panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
        {margin:0cm;
        margin-bottom:.0001pt;
        font-size:11.0pt;
        font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
        {mso-style-priority:99;
        color:blue;
        text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
        {mso-style-priority:99;
        color:purple;
        text-decoration:underline;}
p.msonormal0, li.msonormal0, div.msonormal0
        {mso-style-name:msonormal;
        mso-margin-top-alt:auto;
        margin-right:0cm;
        mso-margin-bottom-alt:auto;
        margin-left:0cm;
        font-size:11.0pt;
        font-family:"Calibri",sans-serif;}
span.E-mailStijl18
        {mso-style-type:personal-reply;
        color:black;}
.MsoChpDefault
        {mso-style-type:export-only;
        font-size:10.0pt;
        font-family:"Calibri",sans-serif;
        mso-fareast-language:EN-US;}
@page WordSection1
        {size:612.0pt 792.0pt;
        margin:70.85pt 70.85pt 70.85pt 70.85pt;}
div.WordSection1
        {page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
      <div class="WordSection1">
        <p class="MsoNormal"><span
            style="color:black;mso-fareast-language:EN-US">Hello,<o:p></o:p></span></p>
        <p class="MsoNormal"><span
            style="color:black;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
        <p class="MsoNormal"><span
            style="color:black;mso-fareast-language:EN-US">I have setup
            DKIM for a long time.<br>
            But resent someone point me to a site: </span><a
            href="https://en.internet.nl/" moz-do-not-send="true">https://en.internet.nl</a><span
            style="color:black;mso-fareast-language:EN-US"><o:p></o:p></span></p>
        <p class="MsoNormal"><span
            style="color:black;mso-fareast-language:EN-US">If i test one
            of my domains it says:<o:p></o:p></span></p>
        <p class="MsoNormal"><span style="color:black;background:white">Your
            domain does <em><span
                style="font-family:"Calibri",sans-serif;border:none
                windowtext 1.0pt;padding:0cm">not</span></em> support
            DKIM records.<o:p></o:p></span></p>
        <p class="MsoNormal"><span
            style="color:black;mso-fareast-language:EN-US"><br>
            If i use dig to test a domain like sidn.nl <br>
            dig _domainkey.sidn.nl TXT<o:p></o:p></span></p>
        <p class="MsoNormal"><span
            style="color:black;mso-fareast-language:EN-US">Im getting a
            NOERROR<br>
            <br>
            <o:p></o:p></span></p>
        <p class="MsoNormal"><span
            style="color:black;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
        <p class="MsoNormal"><span
            style="color:black;mso-fareast-language:EN-US">If im using
            dig on one of my domains:<o:p></o:p></span></p>
        <p class="MsoNormal"><span
            style="color:black;mso-fareast-language:EN-US">dig
            _domainkey.heidewachter.nl TXT<o:p></o:p></span></p>
        <p class="MsoNormal"><span
            style="color:black;mso-fareast-language:EN-US">im getting a
            NXDOMAIN<o:p></o:p></span></p>
        <p class="MsoNormal"><span
            style="color:black;mso-fareast-language:EN-US"><br>
            In the dns i have:<o:p></o:p></span></p>
        <table class="MsoNormalTable"
          style="width:1080.0pt;background:white;border-collapse:collapse"
          width="1440" cellspacing="0" cellpadding="0" border="0">
          <tbody>
            <tr>
              <td style="width:205.55pt;border:none;border-top:solid
                #DEE2E6 1.0pt;padding:.75pt .75pt .75pt .75pt"
                width="274" valign="top">
                <p class="MsoNormal"><span style="color:#212529">default._domainkey.heidewachter.nl<o:p></o:p></span></p>
              </td>
              <td style="width:3.0cm;border:none;border-top:solid
                #DEE2E6 1.0pt;padding:.75pt .75pt .75pt .75pt"
                width="113" valign="top">
                <p class="MsoNormal"><span style="color:#212529">TXT<o:p></o:p></span></p>
              </td>
              <td style="width:789.4pt;border:none;border-top:solid
                #DEE2E6 1.0pt;padding:.75pt .75pt .75pt .75pt"
                width="1053" valign="top">
                <p class="MsoNormal"><span style="color:#212529">v=DKIM1;
                    t=s; p=MIICIjAN……<o:p></o:p></span></p>
              </td>
            </tr>
          </tbody>
        </table>
        <p class="MsoNormal"><span
            style="color:black;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
        <p class="MsoNormal"><span
            style="color:black;mso-fareast-language:EN-US">Any idees
            what is wrong?<o:p></o:p></span></p>
        <p class="MsoNormal"><span
            style="color:black;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
        <p class="MsoNormal"
          style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span
            style="font-size:12.0pt;font-family:"Times New
            Roman",serif;color:black">Met vriendelijke groet,<o:p></o:p></span></p>
        <p class="MsoNormal"
          style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span
            style="font-size:12.0pt;font-family:"Times New
            Roman",serif;color:black">Steffan Noord </span><o:p></o:p></p>
      </div>
      <br>
      <fieldset class="mimeAttachmentHeader"></fieldset>
      <pre class="moz-quote-pre" wrap="">_______________________________________________
Pdns-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Pdns-users@mailman.powerdns.com">Pdns-users@mailman.powerdns.com</a>
<a class="moz-txt-link-freetext" href="https://mailman.powerdns.com/mailman/listinfo/pdns-users">https://mailman.powerdns.com/mailman/listinfo/pdns-users</a>
</pre>
    </blockquote>
    <p><br>
    </p>
  </body>
</html>